/*
 * To change this template, choose Tools | Templates
 * and open the template in the editor.
 */

package Controller;

import Model.Bean.Usuarios;
import Model.Servicios.UsuarioSrv;
import Util.Constantes;
import java.io.IOException;
import java.io.PrintWriter;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

/**
 *
 * @author Sixviv
 */
public class LogInController extends HttpServlet {
   
    /** 
     * Processes requests for both HTTP <code>GET</code> and <code>POST</code> methods.
     * @param request servlet request
     * @param response servlet response
     * @throws ServletException if a servlet-specific error occurs
     * @throws IOException if an I/O error occurs
     */
    protected void processRequest(HttpServletRequest request, HttpServletResponse response)
    throws ServletException, IOException {
        response.setContentType("text/html;charset=UTF-8");
        PrintWriter out = response.getWriter();
        try {
            UsuarioSrv usuarioSrv = new UsuarioSrv();
            if(!validar(request.getParameter("usuario"))){
                out.println("<script type='text/javascript'>alert('Escriba correctamente el nombre de usuario');</script>");
                request.getRequestDispatcher("index.jsp").include(request,response);
            }else{
                if(!validar(request.getParameter("password"))){
                    out.println("<script type='text/javascript'>alert('Escriba correctamente la contraseña');</script>");
                    request.getRequestDispatcher("index.jsp").include(request,response);
                }
                else{
                    Usuarios usuario = usuarioSrv.getUsuario(request.getParameter("usuario"),request.getParameter("password"));
                    if(usuario!=null){
                        request.getSession().setAttribute("usuario", usuario);
                        switch(usuario.getTipo()){
                            case Constantes.SECRETARIA:                        
                                request.getRequestDispatcher("notificaciones").include(request,response);
                                break;
                            case Constantes.GERENTE:
                                request.getRequestDispatcher("panelGerente.jsp").include(request,response);
                        }
                    }else{
                        out.println("<script type='text/javascript'>alert('No se encontro usuario, verifique los datos');</script>");
                        request.getRequestDispatcher("index.jsp").include(request,response);
                    }
                }
           }
        } finally { 
            out.close();
        }
    }

    private boolean validar(String cadena){
    if(cadena.contains("\"")||cadena.contains("'")||cadena.contains("-")||cadena.contains("<")||cadena.contains(">")){
        return false;
    }else{
        return true;}
    }
    // <editor-fold defaultstate="collapsed" desc="HttpServlet methods. Click on the + sign on the left to edit the code.">
    /** 
     * Handles the HTTP <code>GET</code> method.
     * @param request servlet request
     * @param response servlet response
     * @throws ServletException if a servlet-specific error occurs
     * @throws IOException if an I/O error occurs
     */
    @Override
    protected void doGet(HttpServletRequest request, HttpServletResponse response)
    throws ServletException, IOException {
        processRequest(request, response);
    } 

    /** 
     * Handles the HTTP <code>POST</code> method.
     * @param request servlet request
     * @param response servlet response
     * @throws ServletException if a servlet-specific error occurs
     * @throws IOException if an I/O error occurs
     */
    @Override
    protected void doPost(HttpServletRequest request, HttpServletResponse response)
    throws ServletException, IOException {
        processRequest(request, response);
    }

    /** 
     * Returns a short description of the servlet.
     * @return a String containing servlet description
     */
    @Override
    public String getServletInfo() {
        return "Short description";
    }// </editor-fold>

}
